moltis

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

CVE-2026-88140

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69506

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69506

The Windows Key Storage Provider is vulnerable to an out-of-bounds read (CWE-125). This vulnerability allows an authorized attacker to disclose information locally . The vulnerability is assigned a CVSS 3.1 base score of 4.7 (Medium) , characterized by a LOCAL attack vector and HIGH confidentiali...

EUVD-2026-100335

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

EUVD-2026-99659

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-88140

An out-of-bounds read vulnerability exists in the Windows Key Storage Provider . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of the intended memory boundaries. The vulnerability is assigned a CVSS 3.1 base score of 5.5 (Medium) with a ...

Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69506: Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88140: Windows Key Storage Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-69506: Out-of-bounds Read

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

PT-2026-112057

Name of the Vulnerable Software and Affected Versions Windows Key Storage Provider affected versions not specified Description An out-of-bounds read occurs in the Windows Key Storage Provider, which allows an authorized attacker to disclose sensitive information locally...

PT-2026-112951

Name of the Vulnerable Software and Affected Versions Windows Key Storage Provider affected versions not specified Description An out-of-bounds read occurs in the Windows Key Storage Provider, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the...

CVE-2026-88140: Out-of-bounds Read

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-83551 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path

Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python SDK before v3.11.0 and v2.256.0 might allow an authenticated remote user to extract the HMAC signing key from SageMaker DescribePipeline API responses and forge valid...

CVE-2026-81683 openssl_encrypt before 1.4.9 Plaintext Private Key Storage

opensslencrypt pip package openssl-encrypt versions 1.4.8 and earlier store an mTLS client private key in cleartext within a world-readable 0644 SharedPreferences file via the desktop GUI's Settings screen 'combined certificate and private key' PEM field. A local attacker with file system access...

PT-2026-77316

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio terminal SSH key authentication in custom components/blueprint studio/backend/terminal manager.py wrote SSH private-key material to a file under the Home Assistant configuration...

CVE-2026-48088

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route POST /api/tenants/tenantId/staff/staffId/crypto accepts and stores attacker-controlled ML-KEM-768 public keys against any tenant on the platform without...

CVE-2026-48088 OpenReception vulnerable to unauthenticated staff crypto poisoning that breaks E2E recipient directory

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route POST /api/tenants/tenantId/staff/staffId/crypto accepts and stores attacker-controlled ML-KEM-768 public keys against any tenant on the platform without...